OperationContextOIDCConfiguration
OperationContextOIDCConfiguration contains configuration for automatically fetching temporary credentials from cloud providers using the OIDC token issued by the service.
Properties
- AWS contains AWS-specific configuration.
- ↳
durationstring optionalDuration is the duration of the assume-role session. - ↳
policyArnsarray[string] optionalPolicyARNs is an optional set of IAM policy ARNs that further restrict the assume-role session. - ↳
roleArnstring requiredThe ARN of the role to assume using the OIDC token. - ↳
sessionNamestring requiredThe name of the assume-role session. - Azure contains Azure-specific configuration.
- ↳
clientIdstring optionalClientID is the client ID of the federated workload identity. - ↳
tenantIdstring optionalTenantID is the tenant ID of the federated workload identity. - ↳
subscriptionIdstring optionalSubscriptionID is the subscription ID of the federated workload identity. - GCP contains GCP-specific configuration.
- ↳
projectIdstring requiredProjectID is the numerical ID of the GCP project. - ↳
regionstring optionalRegion is the region of the GCP project. - ↳
workloadPoolIdstring requiredWorkloadPoolID is the ID of the workload pool to use. - ↳
providerIdstring requiredProviderID is the ID of the identity provider associated with the workload pool. - ↳
serviceAccountstring requiredServiceAccount is the email address of the service account to use. - ↳
tokenLifetimestring optionalTokenLifetime is the lifetime of the temporary credentials.
Thank you for your feedback!
If you have a question about how to use Pulumi, reach out in Community Slack.
Open an issue on GitHub to report a problem or suggest an improvement.